more obfuscated version of xor.php